# @im23pds: Chrome zero-day CVE-2026-125350 in XML component actively exploited, u

Source: https://x.com/im23pds/status/2120099114520281463
Kiwi News: https://news.kiwistand.com/stories/im23pds-Chrome-zero-day-CVE-2026-125350-in-XML-component-actively-exploited-u?index=0x6af3533bc3f5adf8adf63cf8d8b2d073ad0a070e5d4347379a5f336fd8229239f8174a91
Submitted by tim on 2026-11-10 UTC, 1 upvote, 0 comments

🚨Chrome 0-Day 紧急预警，Google 确认已被在野利用。

CVE-2026-125350：Chrome XML 组件高危 UAF 漏洞，成功利用可破坏内存并实现代码执行，Google 确认已被在野利用。

请更新至 157.0.8103.50 并重启。#Chrome #0Day #网络安全
Chrome Security Update： https://chromereleases.googleblog.com/2026/11/stable-channel-update-for-desktop_018223192.html